EUVD-2010-1619

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Multiple XSS vulnerabilities in SilverStripe before 2.3.5 allow remote script injection via forms and search.

Reporter	Title	Published	Views	Family All 8
Tenable Nessus	SilverStripe < 2.3.5 Cross-site Scripting Vulnerability	26 Jan 201000:00	–	nessus
Tenable Nessus	SilverStripe Forums Module 'Search' Parameter XSS	28 Jan 201000:00	–	nessus
CVE	CVE-2010-1593	28 Apr 201023:00	–	cve
Cvelist	CVE-2010-1593	28 Apr 201023:00	–	cvelist
Github Security Blog	SilverStripe vulnerable to Cross-site Scripting	14 May 202202:45	–	github
NVD	CVE-2010-1593	28 Apr 201023:30	–	nvd
OSV	GHSA-WG4M-VVP6-2HC5 SilverStripe vulnerable to Cross-site Scripting	14 May 202202:45	–	osv
Prion	Cross site scripting	28 Apr 201023:30	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "1c7e3ffd-1597-3682-b1bb-cba67e794859",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0dff5a3c-a3fa-33c0-8308-af2ac2e43279",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
silverstripe	www.silverstripe.org/security-releases/
osvdb	www.osvdb.org/61921
secunia	www.secunia.com/advisories/38347
osvdb	www.osvdb.org/61923
securityfocus	www.securityfocus.com/archive/1/509139/100/0/threaded
open	www.open.silverstripe.org/wiki/ChangeLog/2.3.5
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/55838
securityfocus	www.securityfocus.com/bid/37923
archives	www.archives.neohapsis.com/archives/fulldisclosure/2010-01/0450.html
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/55839

07 Oct 2025 00:30Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.3

EPSS0.00581